How do you handle production patching for EC2 instances?

how do you handle production patching for EC2 instances in your environment? I'm interested in learning about real-world production practices. Some questions: Do you use AWS Systems Manager Patch Manager, Patch Policies, or another approach? Do you patch EC2 instances in place, or do you replace them with new AMIs (immutable infrastructure)? How do you schedule maintenance windows and minimize downtime? How d